VYPR
← All advisories
Medium severity5.3OSV Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2025-67083

CVE-2025-67083

Description

Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and the file type depends on the web server and its configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Invoiceplane/InvoiceplaneOSV3 versions
    0.9beta, v1.0.0, v1.0.1, …+ 2 more
    • (no CPE)range: 0.9beta, v1.0.0, v1.0.1, …
    • cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*range: <1.6.4
    • (no CPE)range: <=1.6.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.